iRhythm Reports Data Access Incident, Says Device Systems Unaffected
Summary
iRhythm Holdings says data in third-party-hosted business applications was accessed through social engineering. It identified suspicious activity June 8 and received a ransom demand June 9; the company says patient safety and key systems were unaffected.
Key points
- iRhythm Holdings disclosed unauthorized access to data in third-party-hosted business applications.
- The company says the access involved social engineering.
- Suspicious activity was identified June 8, and iRhythm received a ransom demand June 9.
- iRhythm launched an investigation with external experts.
- The company said patient safety, device systems, manufacturing operations, and financial reporting systems were not affected.
Article Details
- Victim Organization
- iRhythm Holdings
- Victim Domain
- irhythmtech.com
- Incident Type
- Unauthorized access to data through social engineering involving third-party hosted business applications
- Incident Date
- 2026-06-08
- Disclosure Date
- 2026-06-08
- Operational Impact
- The company said patient safety, device systems, manufacturing operations, and financial reporting systems were not affected.
- Ransom Or Extortion
- The company reportedly received a ransom demand on 2026-06-09; no amount or further details were provided.
- Claim Status
- confirmed